Unscored CVE-2016-1365 EUVD-2016-2464GHSA-q9m6-5269-jg29

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authentica…

Published Aug 18, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.

References

92507 vdb-entry
1036634 vdb-entry
20160817 Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability vendor-advisory